Privacy Policy

Last updated: May 15, 2026

NuLevels Health, Inc. ("NuLevels," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you use nulevels.health (the "Service"), how we use it, and the choices you have.

The short version: We collect the information you give us to make the Service work. We don't sell your data. We use a small set of vendors (like Supabase and Anthropic) to operate the platform. You can delete your account and data anytime by emailing privacy@nulevels.health.

1. Who We Are

NuLevels Health, Inc. is a Delaware corporation operating an AI-powered platform that helps consumers manage nutritional supplements, identify potential deficiencies, and connect with nutrition-first practitioners. Our principal contact for privacy questions is privacy@nulevels.health.

2. Information We Collect

Information You Provide

Account information: name, email address, password (hashed)
Supplement information: photos of supplement labels, brand names, ingredients, doses, and timing you enter
Health profile information (optional): conditions you wish to track, medications, genetic variants (such as MTHFR status), dietary preferences, and lab results you choose to share with the Service
Communications: messages you send to us via email, contact forms, or support channels
Payment information: billing details processed by our payment provider (Stripe). We do not store full credit card numbers.

Information We Collect Automatically

Usage data: features you use, pages you visit, time spent in the Service
Device data: browser type, operating system, IP address, approximate location (derived from IP)
Cookies: small files used to keep you logged in and remember your preferences

3. How We Use Your Information

To provide, maintain, and improve the Service
To process your supplement label photos using artificial intelligence (see Section 5)
To generate your personalized NuLevels Report
To process payments and manage subscriptions
To send you transactional emails (account notices, billing receipts, security alerts)
To respond to your support requests
To detect and prevent fraud, abuse, and security incidents
To comply with legal obligations

We do not use your health information or supplement data for advertising. We do not sell your personal information.

4. Health Information: Important Notes

NuLevels is not a covered entity or business associate under the U.S. Health Insurance Portability and Accountability Act (HIPAA). The Service is an informational and organizational tool. We are not a healthcare provider, and information you share is not subject to HIPAA. We nonetheless apply security practices designed to protect sensitive personal information, including encryption in transit, encrypted storage, and row-level access controls.

You should not enter information into NuLevels that you would not be comfortable sharing with a careful but non-HIPAA-covered third party. If you have particularly sensitive health information, consult your healthcare provider before sharing it through any consumer platform.

5. AI Processing

When you upload photos of supplement labels, the images are sent to Anthropic, Inc. (operator of the Claude API) for AI-powered ingredient extraction. Anthropic processes the images on our behalf and does not use your data to train its models. The extracted text is returned to NuLevels and stored in your account.

For more information about Anthropic's data handling, see Anthropic's Privacy Policy.

6. Service Providers We Use

We use the following third-party services to operate NuLevels:

Supabase, database hosting and user authentication
Netlify, website and application hosting
Anthropic, AI processing of supplement label photos
Stripe, payment processing and subscription billing
Google Workspace, business email and document storage

Each of these providers is bound by their own terms and applicable privacy laws. We use only the data necessary to provide their service.

7. How We Share Information

We share your information only:

With service providers listed in Section 6, as needed to operate the Service
When you explicitly share your NuLevels Report (which is your data, and you control who receives it)
If required by law, valid legal process, or to protect rights, safety, or property
In connection with a merger, acquisition, or sale of assets (with notice to you)

We do not sell your personal information. We do not share your information with advertisers.

8. Your Rights and Choices

Access: You can view and edit your account information any time by signing in to the Service.
Export: You can download your NuLevels Report containing your data.
Deletion: You can delete your account by emailing privacy@nulevels.health. We will delete your personal data within 30 days, except where retention is required by law.
Marketing email: You can unsubscribe from non-essential emails using the unsubscribe link in any marketing message. Transactional emails (receipts, security notices) cannot be opted out of while you have an account.
State privacy rights: Residents of California, Colorado, Virginia, and other states with comprehensive privacy laws have additional rights, including the right to know what we collect and request correction or deletion. To exercise these rights, contact privacy@nulevels.health.

9. Data Retention

We retain your account information for as long as your account is active. After account deletion, we delete personal data within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes (typically up to 7 years for financial records).

10. Security

We use industry-standard security measures including TLS encryption in transit, encrypted database storage, row-level access controls, and limited employee access. No internet-based service is 100% secure, and we cannot guarantee absolute security. If you become aware of a security issue, please contact us at privacy@nulevels.health.

11. Children

NuLevels is intended for adults 18 and older. We do not knowingly collect information from children under 18. If you believe a child has provided information to us, contact privacy@nulevels.health and we will delete the account.

12. International Users

NuLevels is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the Service or sending an email to your account address. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

Questions about this Privacy Policy? Email privacy@nulevels.health.

NuLevels Health, Inc.
Delaware C-Corporation